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Abstract 

An embedded cryptographic system comprises at least one test plaintext/ciphertext pair P u 
5 Q for which the key has been destroyed or stored at a very safe place. If at some later date, 
at least one apoptosis key K-, is presented to the cryptographic system which has the 
property that G is the enciphered image of P,- under K u then the algorithm could be broken 
and should not be used any more. Instead a more conservative algorithm should be used. 
The method for changing the ciphering by an embedded cryptographic system includes the 

10 step of checking whether at least one test ciphertext d is the enciphered image of a 

corresponding test plaintext P,- under a apoptosis key K-, and the step of switching off the 
used cryptographic mode or the step of switching to an other cryptographic mode in case of 
a positive checking result. In order to enable the step of checking a protocol has to define a 
control stream with at least one key to be checked. The checking will be done as soon as 

15 such a control stream is received by the cryptographic system. The advantage of this 
solution is the fact, that there is no need for controlling respectively trusting the 
manufacturer or a security service. The embedded cryptographic system can receive the 
key or a collection of keys {/Q from anywhere. 


